IT Risk Manager (City of London)

Tradition is the interdealer broking arm of Compagnie Financière Tradition and one of the world's largest interdealer brokers in over-the-counter financial and commodity related products. CFT is represented in over 28 countries, employing over 2,500 people. Tradition’s goal is to provide superior client services. It believes its business success is a direct reflection of its employees and recruits. As such, teamwork, creativity, reliability and integrity are components of a work ethic taken very seriously since the company was founded in 1959.

Tradition is currently seeking to appoint an IT Risk Manager to be based within the London office. Main responsibilities within the IT Risk Manager position include:

• Identifying, assessing, and prioritising IT risks in line with the IT Risk Management Framework and enterprise threat risk program.
• Designing, implementing, and monitoring effective IT controls to mitigate risks and ensure alignment with the group's risk appetite.
• Facilitating Risk and Control Self-Assessments (RCSAs) and ensuring outcomes are recorded within the Risk Management System.
• Monitoring key risk indicators (KRIs), tracking breaches, and reporting on risk trends, control weaknesses, and remediation plans.
• Supporting the development and tracking of risk remediation actions and promoting risk-awareness across IT operations.
• Conducting regular IT risk assessments to identify emerging threats and ensure compliance with regulatory and industry standards.
• Evaluating Governance, Risk, and Compliance (GRC) tools to ensure alignment with business needs and regulatory requirements.
• Maintaining and updating IT policy and procedural documentation in line with operational and compliance needs.
• Acting as the primary liaison during internal and external audits, coordinating responses and tracking audit actions to closure.
• Overseeing third-party IT risk management and leading assurance testing to validate the effectiveness of IT controls.

Key skills, experience and competencies required to be successful in this role:

• Bachelor’s degree in Information Technology, Computer Science, or a related field.
• Experience in IT Risk Management, Operational Risk, or a related discipline.
• Hands-on experience with GRC tools—particularly in IT Compliance, IT Risk Management, and Vendor Management—is desirable.
• Strong knowledge of IT risk management frameworks and standards such as ISO 27001 and NIST.
• Proven experience in developing and implementing risk management strategies, policies, and procedures.
• Relevant certifications such as CRISC, CISA, CGEIT, or ISO 27001 Implementer.
• Previous experience in a financial services environment is advantageous.
• Additional risk qualifications with an IT specialism would be beneficial.
• Solid academic background with strong analytical and problem-solving skills.
• Proficiency in Microsoft Office, particularly Excel, Word, and PowerPoint.

Tradition welcome all suitable applications and are an equal opportunity employer who value diversity. All employment is decided on the basis of qualifications and merit.